GRAPHS ASSOCIATED WITH THE MAP X ^ X + X~ l 
IN FINITE FIELDS OF CHARACTERISTIC TWO 

S. UGOLINI 

Abstract. In this paper we study the structure of the graphs associated with 

the iterations of the map x n- x + x^ 1 over finite fields of characteristic two. 

f^> Formulas are given for the length of the cycles and the depth of the trees relying 

Cn , upon the structure of the group of the rational points of Koblitz curves and the 

(3jy congruences of Kloosterman sums modulo powers of 2. 
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The map which sends x to x + x _1 in a finite field (with a point oo added 
to it) plays a role in various investigations. The so-called Q-transform depends 
on it, as it takes a polynomial / of degree n to the self-reciprocal polynomial 
f®(x) = x n f{x + a; -1 ) of degree 2n (see |Jun93j ). Also, the possible correlation 
between the multiplicative orders of x and x + x~ x was studied in |Shp01| . 

Iteration of maps on finite fields are also important. For example, Pollard's 
integer factoring algorithm is based on the iteration of a quadratic map x i— > x 2 + c 
(mod N), where c^O, —2 is a randomly-chosen constant and N is the integer to 
be factored. See |TV04j for one of several studies on iterations of maps of this 



VO . form in a finite field. 



Our work focuses on iterations of the map i4i + x~ l on the projective line 
P 1 (F2i) = F2« U {oo}, where F2« is a finite field of characteristic 2. A directed 
graph on P 1 (F 2 n) is associated with the map in an obvious way. Each connected 
component consists of a cycle and directed binary trees entering the cycle at various 
points. 

Experimental evidence has shown that such graphs present remarkable symme- 

^ tries. In fact, it turns out that the map is closely related to the duplication map 

on a certain elliptic curve on E, the Koblitz curve y 2 + xy = x 3 + 1 over F 2 . Using 

this fact we give a precise description of the structure of such graphs, including 

the length of the cycles and the depth of the trees. 

2. Preliminaries 

For a fixed positive integer n let F 2 n be the field with 2 n elements and P 1 (F 2 i) = 
F 2 n U {oo} the projective line over F 2 «. We define a map t? over P x (F 2 n) in such 
a way: 

oo if a = or oo 



^ a + a J otherwise. 
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We can associate a graph with the map d over the field F 2 n in a natural way. The 
vertices of the graph are labelled by the elements of P 1 (F 2 «). If a G P 1 (F 2 «) and 
f3 = $(a), then we connect with a directed edge the vertex a with the vertex /3. 
If 7 G P 1 (F 2 ™) and i? fc (7) = 7, for some positive integer k, then 7 belongs to a 
cycle of length k or a divisor of fc. An element 7 belonging to a cycle can be the 
root of a reverse-directed tree, provided that 7 = $(a:), for some a which is not 
contained in any cycle. 

Example 2.1. Consider the graph associated with the map d in the field F 2 s, 
constructed as the splitting field over F 2 of the polynomial x 5 + x 2 + 1 G F 2 [x] . If a 
is a root of such a polynomial in F 2 s, then P 1 (F 2 s) = {0}U{a* : 1 < % < 31}U{oo}. 
We will label the nodes denoting the elements a 1 by the exponent % and the zero 
element by '0'. 





In the following we will denote the absolute trace of an element a G F 2 n by 
Tr„(a), namely 



n— 1 



Tr n (a) = ^2a 2 \ 

Since Tr n (a) G F 2 , the set of points belonging to the projective line P x (F 2 n) can 
be partitioned in the subsets 

A n = {ae F* 2n : Tr n (a) = Tr^a" 1 )} U {0, 00} 
B n = {ae F; n : Tr n (a) ^ Tr^ 1 )}. 
The following holds. 
Lemma 2.2. If a is an element o/F 2 „ ; then 

Tr„((« + «- 1 )- 1 )=0. 
Proof. We compute explicitly the trace of (3 = (a + a -1 ) -1 : 

n-l , \ 2* n / -, 1 \ 
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□ 

Remark 2.3. As a consequence of previous Lemma, if one considers the restrictions 
-d An and i? Bn of ■d at A n (respectively B n ), then Im($ A J C A n and Im(i? Bn ) C S n . 
This amounts to saying that the graph associated with the map $ in the field F 2 « 
is the union of the graphs associated with the maps $A n over A n and $B n on P n . 

The map d is strictly related to the duplication map defined over Koblitz curves. 
We remind that a Koblitz curve is an elliptic curve defined over F 2 by an equation 
of the form 

y 2 + xy = x 3 + ax 2 + 1, 

where a G F 2 . In particular, for a = we get the curve Kob defined by 

y 2 + xy = x 3 + 1. 

If P = (xi,yi) G Kobo(F2"), namely P is a rational point of Kobo over the field 
F 2 n, then IP = (a^jjte)) where 

£2 = x\ + -^ = $(xi) 2 
x^ 

Moreover, if P = (x, y) G .K"o&o(F 2 n), then — P = (x, x + y). 
The following result holds (see |LW90j ). 

Lemma 2.4. Let /3 G F 2 «. Then, Tr n (/3) = if and only if there exists a G F 2 « 
suc/i i/iat /3 = a + a 2 . 

We make immediately use of the Lemma above, proving the following. 

Lemma 2.5. Letx G F 2 n. Then, there exists y G F 2 « such that (x,y) G i^o&o(F 2 n) 
if and only if x = or Tr n (x) = Tr n (x _1 ). 

Proof. Let y G F 2 n such that (x,y) G ifo&o(F 2 ™). If x 7^ 0, then 

I/ 2 . 1/ , -2 

-17 + - = x + x . 

X z X 

Since Tr„ I — - J = Tr n ( — ) and Tr n (x _1 ) = Tr n (x~ 2 ), then Tr n (x + x -1 ) = 0. 

Conversely, if x = 0, then (x,y) = (0, 1) G Kob (F 2 n). If x 7^ and Tr n (x) = 
Tr n (x _1 ), then the equation 

z 2 + z = x + x~ 2 

has two solutions z±, z%. Let yi = Zi ■ x, for i = 1 or 2. Since 

2/i 2 . I/i . -2 

—5- H = x + x , 

we get that y 2 + xy, = x 3 + 1 and we are done. □ 

If a is an element of F 2 n, then we can define the Kloosterman sum 

S^(a) = J2 (-l) Tl " ( - x ~ 1+0 ^ : \ 
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The values of the Kloosterman sums for a = 1 are strictly related to the number 
of rational points of Kob over F 2 « (see |LW90] for more details). We have that 

\Kob (F 2 n)\=2 n + l + S^ n \l). 

In [Car69] some relations for 5 ,( - n ^(l) are given. It is proved that 

/ 2 i) S^(l) = i _1 ( mod 8 ) for n even, n^2 

1 3 (mod 8) for n odd. 

Moreover 

(2.2) S {n) {l) = -2-2 n / 2 cos{mp), 
where 

cos(ip) = ■=; sin(v9) = — — . 

As a consequence of (12.21) the following relation between S^ 2n \l) and 5^(1) 
holds: 

(2.3) S (2n) (l) = -S (n) (l) 2 + 2"' +1 . 
Using ( 12. 3 p it is possible to generalize (12. ip . 

Lemma 2.6. Let n = 2 l m be a positive integer greater than 1 such that n (jL {2, 4} ; 
for some non-negative integer I and odd integer m. Then 

q(»)m-/ _1 (mod2'+ 2 ) 

^ [i) ~ \ -l + 2'+ 2 (mod2'+ 3 ). 

Proof. Let m > 3. We prove the thesis by induction on / > 0. 

Let / = 0. In this case n is odd and the thesis follows from ( 12. ip . 

Suppose that the thesis holds for some non-negative integer I — 1. Let n = 
2 l m = 2(2 l ~ l m). For the sake of clarity denote k = 2 l ~ 1 m. Then, 

S-W(l) = -S {k \l) 2 + 2 k+1 = -1 (mod 2 /+2 ), 

being k + 1 = 2 l ~ 1 m + 1 > 2 i-1 3 + 1 > / + 3. As regards the second congruence, 
since 5^(1) = -l + 2 m (mod 2'+ 2 ), then S^ k \l) 2 = 1 — 2 Z+2 (mod 2 /+3 ). Hence, 

5-(»)(l) = -1 + 2 /+2 + 2 fc+1 = -1 + 2 Z+2 (mod 2'+ 3 ). 

Now we deal with the case n = 2 l , where / > 3. 

When n — 8, namely Z = 3, the Kloosterman sum S( 8 )(l) = 31. Hence we are 
done. Suppose that the thesis holds for some integer / — 1 greater than or equal 
to 3. Let n = 2k, where k = 2 l ~ 1 . Then, 

5 (2fe)(!) = _s(*0(i)2 + 2 k+1 = -1 (mod 2' +2 ), 

since k + 1 = 2 1 ' 1 + 1 > I + 3 for / > 4. 
The second congruence holds too, since 

5 (2fc)( 1) = _ 5 (fc) (1 )2 + 2 fe +! = -1 + 2'+ 2 (mod 2 /+3 ). 

n 
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3. The structure of the group of the rational points of an 
elliptic curve over a finite field 

In this Section we will briefly recall some results concerning the number of 
rational points and the structure of the group of rational points of an elliptic 
curve defined over a finite field of arbitrary characteristic. More details can be 
found for example in |Riic87] or |Wit01j . 

If E is an elliptic curve defined over a finite field F q of characteristic p, then 
the structure of the group ^(F,^) of the rational points of E over F q k is strictly 
related to the ring End.F q (E) of the endomorphisms of E over F q . Among all the 
endomorphisms, the Frobenius endomorphism n q plays a special role, as we will 
see later. It maps a point P = (xp, yp) of E to (x P , y P ). Note in passing that the 
ring Z of integers can be viewed as a subring of Endp (E). 

The following Theorem holds. 

Theorem 3.1. Let E be an elliptic curve defined over a finite field F q and h the 
number of rational points of E over F q . Then, 

h = 1 + q- (3, 

where (3 is an integer with \/3\ < l^fq. Moreover, if ((3,p) = 1, then Q(7r 9 ) 
is an imaginary quadratic field over Q and all the orders in Q(n q ) are possible 
endomorphism rings of E over F q . 

We remind that an order D in a number field K is a subring of K such that K 
is its quotient field, D fl Q = Z and the additive group of D is finitely generated. 

The structure of the group -E^F^-) of rational points over F q k of an elliptic curve 
defined over a finite field F q such that TT q (jL Z is as follows. 

Theorem 3.2. Let E be an elliptic curve defined over F q , R = Endp 9 (i5) and 
F q k the field with q k elements. If 7i q $. Z, then there is an isomorphism 

E(F qk ) = R/(n k q -l)R 

of R-modules. 

Theorem 3.3. In the same hypotheses of Theorem \3.2\ if m = \E(F q )\ and d = 

(q + 1 — m) 2 — Aq, then d < and EndF 9 (-E) is an order in Q(vrf). 

The proof of Theorem l3.3[ which can be found in [WitOlj . yields a representation 
of the q- Frobenius endomorphism as an element of Q(va), namely 

q + l-m + Vd 
(3-1) vr g = . 

Consider now the Koblitz curve Kob Q . The number of rational points of Kobo 
over F 2 is 4. Hence the representation of the Frobenius endomorphism 7r 2 as an 
element of Q(v / — 7) is 

-l+iV7 
^2 = = • 
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We remind that the ring of integers of Q(\/— 7), which is also its unique maximal 
order, is Z[u], where 

In particular we can write 7r 2 = — 1 + oo. Since End(Kobo) is an order in Q(\/— 7) 
and contains {1, 7r 2 }, then a; G End(Kobo). Therefore R = End(Kob ) = Z[w] and 
the group of rational points of Kob over F 2 n is isomorphic to Rf[v: 2 ~ tyR- The 
ring R is euclidean with respect to the norm N(a + bu) = (a + bu) (a + 6a;). In 
particular iV(7i~ 2 ) = 2, namely 

(3.2) 7r 2 7f 2 = 2 G P, 

where 2 is the duplication map, seen as an endomorphism of Kobo- 

If P = (xi, j/i) G /fo6 (F 2 n) and 2P = (x 2 ,y 2 ), then x 2 = x^ + ^^f 1 ) 2 . Therefore, 

if 7f 2 (-P) = (x', y'), then a;' = X\ + x^ 1 . 

We have obtained that the conjugated of the Frobenius endomorphism takes 

the x-coordinate of a point P G Kobo to $(x). Relying upon this consideration we 

can study the structure of the graph associated with the map $ over a finite field 

of characteristic two. 

4. The structure of the graphs 

In this Section we will describe the structure of the graphs associated with the 
map $. We define the orbit of an element x G P 1 (F 2 n), under the action of the 
map $, as the set 

0( x ) = {#*(a;) : k > 0} . 

The point x is said to be periodic if $ fc (x) = x, for some positive integer k. The 
smallest such k is called the period of x. 
The following holds. 

Lemma 4.1. Let x G F 2 2« and P = (x,y) G Kob (F 2 2n)- Denote by O the point 
at infinity of Kobo. Then, 

( x = 
(vr™ + \)p = O ^^ I or 

I x G F 2 n and Tr n (x + x~ l ) = 1. 

Proof. Suppose that (7r 2 +1)P = O. Then, 7r 2 (P) = — P = (x,x + y) and x 2 " = x. 
Hence, x G F 2 n. If x 7^ and Tr n (x + x _1 ) = 0, then y G F 2 n, as a consequence 
of Lemma 12.51 But this implies that (x, y) G F 2 „. Therefore vr 2 (P) = P and 
(x,y) = P = —P = (x, x + y). Hence x = and y — 1, in contradiction with the 
assumption that i/O. 

Conversely, suppose that x G F^n and Tr n (x + x _1 ) = 1. This implies that 
7r 2 (P) = (x,y 2n ). If j/ 2 ™ = ?/, then P G Kob (F 2 ^)- But this is in contradiction 
with Lemma [231 Hence, (tt£ + 1)P = 0. D 

Our final goal is to describe the structure of the graph associated with the map 
d over P 1 (F 2 n). As remarked in Section [21 this can be done describing separately 
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the structure of the graphs associated with the maps $a„ and $b„ on the sets A n 
and B n respectively (see Section [2] for the details). 

• Graph A n . We remind that, for each x G A n \{0,oo}, there exist two 
distinct points in Kob (F 2 ™) having the same x-coordinate. Moreover 
Kobo(F2n) is isomorphic to R/{^2 ~ 1)-R> being R the ring of integers 
ofQ( v / ^7). 

• Graph B n . Let x G B n . In this case there are exactly two distinct points 
in KoboiYzin) with such an x-coordinate. By Lemma [4.14 (irV; + 1)P = O. 
Viceversa, if P = (x,y) G Kob (F 2 ^) and (71% + 1)P = O, then x G F 2 n 
and Tr n (x + x^ 1 ) = 1 or P = (0, 1). Hence, there is an isomorphism 

^ : Kob (F 2 2 n ) Bn -> i?/(7T^ + 1)/?, 
where 

iro& (F 2 2n) Bn = {(x, j/) G iTo& (F 2 2n) : x G B n or a; = } U O . 

Before dealing with graphs A n and B n we recall just some facts about the ring 
Z[cu], which is the ring of integers of the quadratic number field Q(\/— 7). Since 
the ring Z[o>] is euclidean, it is also a unique factorization domain. Moreover, the 
only positive rational prime which ramifies in R is 7, while all other (positive) 
rational primes either split in R or are inert. 

We can factor the element tt 2 — 1 (resp. tt 2 + 1) in primes of i?. Notice that 7r 2 
divides neither 7T 2 — 1 nor 7r 2 + 1. 

Suppose that 7T 2 — 1 (resp. 71-3 + 1) factors as 

where 



(1) all Ci and / are non- negative integers; 

(2) for 1 < % < v the elements pi G Z are distinct primes of R and N{p e i 1 ) = 

Pi ; 

(3) for f + 1 < i < w the elements r, G R\Z are distinct primes of R, different 
from 7r 2 ,7f 2 and \/—7, and N{r^) = p^, for some rational integer p, such 
that rffi = pi. 

The ring i?/(7T 2 — 1)-R (resp. -R/(7T 2 + 1)-R) is isomorphic to 
(4.1) i?/^x (n^M^J x ( fl iJ/rfi?) *R/(V=f) f R. 

For any 1 < i < v the additive group of R/p^R is isomorphic to the direct sum 
of two cyclic groups of order pf. This implies that, for each integer < hi < e^, 
there are N^ points in R/p^R of order p t \ where 

v ,1 if /ij = 

Pi 2hi — Pi 2( - hi ~^ otherwise. 
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For any v + 1 < i < w the additive group of R/r^R is cyclic of order p^\ Hence, 
there are ip(p i i ) P om ts in R/rfR of order p>, for each integer < hi < e^. 

Finally, the additive group of R/(y/—7yR is isomorphic to the direct sum of 
two cyclic groups of order 7^ 2 , if / is even, or to the direct sum of two cyclic 
groups of order respectively 7^~ 1 ^ 2 and 7^ +1 ^ 2 , if / is odd. In the case that / is 
even, for each integer < hf < //2 there are Nh f points in R/(y/—7)*R of order 
7 hf , where 

1 if h f = 



^ \ 7 2h f - 7 2 ( h f~V otherwise. 
If, on the contrary, / is odd, then 

( 1 if/i / = 

JV h/ = J 7 2ft / - 7 2 ( h f-V if 1 < /i/ < (/ - l)/2 
(^ 72^-1 _ 7 2( h/ -i) if h f = (f+ l)/2 

An element a; G A n \{0, 00} (resp. -B n ), which is periodic under the action of the 
map •&, is the x-coordinate of a rational point of i^o6o(F 2 ") (resp. Kob (F 2 2n) Bn ), 
which corresponds to a point of the form P = (0, P±, . . . , P w , Pf) G R/{^2 — l)R 
(resp. R/(^2 + 1)-^)- Each Pi, for 1 < 2 < w, has order p^*, for some integer 
< hi < e^ Moreover, Pj has order /ij, for some integer such that < hf < f/2 
if / is even or < hf < (/ + l)/2 if / is odd. For any Pi let li be the smallest 
among the positive integers k such that [n2] k Pi = Pi or —Pi. In a similar way, we 
define If to be the smallest among the positive integers k such that \7i2\ k Pf = Pf 
or -P f . 

• If 1 < i < v , then Zj is the smallest among the positive integers k such that 
•p i i divides W \ + 1 or n\ — 1 in R. 

• liv + l<i<w, then li is the smallest among the positive integers k such 



that r„- ' divides 7r| + 1 or 71*2 - 1 in i?. 



The integer If is the smallest among the positive integers k such that 
\J—7 f divides W% + 1 or W k — 1 in /?. 



Let 



Z = lcm(/i,..., l w ,lf). 
We introduce parameters £j, for 1 < i < ty, and £/ such defined: 

1 if [7r 2 ] h Pi = Pi f 1 if [^f'P/ = Pf 

if [7f 2 ]^ = -Pi. £f ~\0 if [TfaJ'/Py = -P f . 



Let 



if any Si = 1 and £/ = 1 or any £, = and £/ = 

1 otherwise. 



Then, the period of x with respect to $ is 2 £ ■ I. 

We note that the number of points P = (0, Pi, ... , P w , Pf) in Rj{i(% — 1)P (resp. 
R/{t^2 + 1)P)j where each Pj has order p^ and Pf has order 7 ft/ , is 

f V \ / w \ 

'"= "ii^ • n ^(pf i ))- jv */ 
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Let P = ip(x,y) (resp. if)(x,y)) be one of such points. The period I of x can 
be calculated as above. In particular, we note that also — P = ip(x,x + y) (resp. 

i[)(x,x + y)) has the same additive order in R/{j^2 ~ 1)-^ ( re sp. R/{^2 + 1)-^)- 

vm~ 
This amounts to saying that the m points give rise to — 

Now we define the sets Z ei = {0, 1, . . . , e«}, for any 1 < % < w, and Zf 
{0, 1, ... , f/2} if / is even or Z f = {0, 1, ...,(/ + l)/2} if / is odd. Let 



cycles of length I. 



H = ]JZ et xZ f . 

i=l 

For any h G H denote by Ch the set of all cycles formed by the elements 
x G A n (resp. B n ) such that (x,y) G Kob (F2n) (resp. Kobo(F 2 2n) Bn ) for some 
y G F 2 n (resp. F 2 2n) and^{x,y) = P = (0, P u . . . ,P W , P f ) G R/(n%-l)R (resp. 
?(x,j/) = P G i?/(7r™ + l)i2), where 

• each Pj, for 1 < i < v, has additive order p i i in R/pfR; 

• each Pj, for v + 1 < i < w, has additive order p^ in R/r^R; 

• Pf has additive order 7 fe/ in R/ (y—T)* R. 

Let /h be the length of the cycles formed by these points. Finally, denote by Ca„ 
the set of all cycles in graph A n and by Cs n the set of all cycles in graph B n . 
The following holds. 



Lemma 4.2. With the above notation, Ca u (resp. Cb,J is equal to M Ch, being 



\i=l / V=t>+1 



heH 

N hf 



for any non-zero h G P . 



In the following we will denote by Va„ (respectively Vs n ) the set of the elements 
of F 2 n belonging to some cycle of Ca„ (respectively Cb„)- Before characterizing 
the trees rooted in vertices of Va u (respectively Vb„), we observe that R/if^R 

eg— 1 

consists of the elements N, Ji ' [^2]*? where each jj is or 1 (see |Gil81] for more 
details). 

4.1. Trees rooted in vertices of Va u - The following Lemma characterizes the 
reversed trees having root in Va„- 

Lemma 4.3. Any element x G Va„ is the root of a reversed binary tree of depth 
eo with the following properties. 

• If x 7^ oo ; then there are \2 k ~ l ~\ vertices at the level k of the tree. Moreover, 
the root has one child, while all other vertices have two children. 

• If x = 00, then there are |~2 fc-2 ] vertices at the level k of the tree. Moreover, 
the root and the vertex at the level 1 have one child, while all other vertices 
have two children. 
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• If I is the greatest power of 2 which divides n, then e$ = I + 2. 

Proof. For a fixed element x G Va„, let (0, Pi, ... , P W) Pf) G R/(n% — l)R be one 
of the (at most two) points with such an x-coordinate. An element x G F 2 n 
belongs to the non-zero level k of the reversed binary tree rooted in x if and only 
if d k (x) = x, d l (x) 7^ x and none of the $ l (x) is periodic for any i < k. Since 
x G A n (see Lemma I2T21 and the subsequent Remark), there exists y G F 2 « such 
that (x, y) G Kob (F 2 n) and ip(x, y) = Q = (Q , Q x , . . . , Q W} Q f ), where Q ^ 0. 
Moreover, since [7f2] e °Qo — in R/W^R, we have that k < e . 

For a fixed positive integer k < eo we aim to find all points (Qo, Q\, . . . , Q w , Qf) 
in R/(ti T 2 — 1)-R such that 

(1) [vf 2 ] fe Qo = and [vfaf-iQo ^ ; 

(2) [W 2 } k Q l = Pi for any 1 < i < w and [W 2 } k Q f = P f , or [W 2 ] k Qi = ~Pi for 
any 1 < i < w and ^jf 2 ] k Qf = —Pf- 

The first condition is satisfied if and only if 



eo-l 



(4.2) Qo = [w 2 r- k + J2 

i=eo—k+l 



JiF2 



where each jj G {0, 1}. The second condition is satisfied if and only if 

Qi = ^2f k Ph for any i, and Q f = [if 2 ]- k P f 

or 

Qi = -[7f 2 ] _fc P, for any i, and Q f = -[W 2 ]' k P f . 

Hence, fixed the values of j% for Gq — k + l<i<e — 1, there are at most two 
possibilities for Q, namely 

Q {1) = (Qo,[W 2 }- k P 1 ,...,[7f 2 \- k P w ,[W 2 ]- k Pf) or 

Q (2) = (Q ,-[n 2 ]- k P u ...,-[7r 2 ]- k P w ,-[n 2 ]- k P f ). 

Therefore, for a fixed positive integer k there are 2 k points Q, whose x-coordinate 
belongs to the level k of the tree, provided that not all Pi are zero (in which case 
x = oo). If Q = ip(x, y) is one of such points, then — Q = ip(x, x + y) has the same 
x-coordinate. Hence, for any x G Ca u different from oo there are 2 k ~ 1 vertices at 
the level k of the reversed binary tree rooted in x. 

If all Pi are zero (and x = oo), then the points Q^ 1 ' and Q^ coincide. Therefore, 
for any k > there are 2 fc_1 points, whose x-coordinate belongs to the level k of 
the tree. Moreover, if Q is one of such points, also — Q has the same x-coordinate 
and is different from Q, unless Q is the only point belonging to the first level of 
the tree. This amounts to say that there are [2 fc_2 ] vertices at the level k of the 
tree. 

Consider now an element x belonging to the level k < eo of the tree rooted in 
some x G Va„- Such an x is the x-coordinate of a point Q = (Qo, Qx, . . . , Q w , Qf) 
in R/{iv 2 — l)R, for some Qq as in (I4.2[) or Q = 0. The equation z + z~ x = x 
is satisfied for at most two z in F 2 n, which are the x-coordinate of two points in 
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R/ffi - 1)R, 

Q W = &o\Qi, ■••,§«, Qf) and Q® = (gf\ Q h ...,Q W} Q f ), 
where 



of = 


e -2 


Q?> = 


i=eQ— k 
e -2 

= [vf 2 ] e °- fe - i + Yl iwW+[7F 2 : 


Q< = 


j=eo— fc 

= [7f2] -1 Qi, if 1 < « < «> 


Q/ = 


= N^Q/ 



and [tF 2 ]Q« = [vf 2 ]Q( 2 ) = Q. 

If fe = 0, then just the point Q^ belongs to the tree, proving that the root of 
the tree has one and only one child. 

If k > 1 and at least one of the Pi is non-zero, then Q^ ^ —Q^ 2 \ hence Q^ 
and Q^ have different ^-coordinates. This implies that each vertex at non-zero 
level A; of a tree rooted in x G VA n \{oo} has two children. 

Suppose now that all the Pi are zero. In this case x = oo. If k — 1, then 
Q = —Q and also Q^ = —Q^ 2 \ Hence the only vertex at the level 1 has 
exactly one child. 

Finally, if k > 1 and all the Pi are zero, then Q ¥" ~Q ■ Hence, each of the 
vertices at the levels k > 1 of the tree rooted in oo has two children. 

As regards the number eo, we note that N^^ — 1) = \Kobo(F2 n )\- We remind 
that 

\Kob (F 2n )\ = T + 1 + S {n \l) 

and that R/fa^—tyR is isomorphic to a product of rings as in (14. ip . Since tt 2 t^2 = 2 
in R, then eo is the greatest power of 2 which divides |ifo&o(I i V)|. We want to 
prove that, if n = 2 l m, for some odd m, then eo = I + 2. Firstly we consider the 
cases n = 2 and n = 4. 

If n = 2, and / = 1, then 5^(1) = 3 and \Kob (F 2 2)\ = 8 = 2 3 . Hence 
e = 3 = / + 2. 

If n = 4, and I = 2, then 5^(1) = -1 and \Kob (F 2 4)\ = 16 = 2 4 . Hence 
e = 4 = I + 2. 

Now consider a positive integer n ^ {2,4} greater than 1. Then, as a conse- 
quence of Lemma 12.61 



w trt? m / ° (mod2'+ 2 ) 

ix o & (F 2 .)i = 1 2 , +2 ; mod2 ^ 



D 



4.2. Trees rooted in elements of Vb u . The following Lemma characterizes the 
reversed trees having root in Vb„- 

Lemma 4.4. Any element x G Vb„ is the root of a reversed binary tree of depth 
1 and has one child. 
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Proof. We remind that the elements of B n are the x-coordinates of the points in 
Kob (F22n) b„\{(0, 1),0}. Moreover there is an isomorphism 



ip : Kob (F 2 2n) Bn 



-> 



E/(7r£ + l)i?. 



We want to prove that the greatest power of If 2 which divides ttJ + 1 is 1. Since 
7T27T2 = 2 in R, then the greatest power of 7f 2 which divides tt^ + 1 is the greatest 
power of 2 which divides N^ + 1). We consider the fact that 



We know that 



N(7T 2 2 n 






l) = iV(7r 2 "-l)iVK + l). 



2 n + l + S {n) (l) 



2 zn + 1 



+ S (2n) (l). 
S (n) (l). 



Now it is an easy matter to check that 

JV(vr™ + 1) = 2 n + 1 

Since 5^(1) = -1 (mod 4), for n > 2, then 

N(tt^ + 1) = 2 (mod 4) 

and we are done. Note in passing that for n = 1 the field F2« = F2 and there are 
no elements x G F 2 such that Tri(x) 7^ Tri(x _1 ). 

Hence, -R/(7r 2 + 1)-R is isomorphic to a product of ring as in (14.11) . where eo = 1. 
This implies that any x G Vb„ is the root of a tree of depth 1. Consider now a 
point P = (0, Pi, . . . , P tt ) G R/(w^ + l)R- The only point Q such that [vf 2 ]Q = P 
isQ = (l,^]- 1 ^,...,^]-^ 



depth 1 and has one child. 



). Hence, any x G Vs n is the root of a tree of 

□ 

5. Examples 



5.1. Graph associated with d in F 2 s. At the beginning of this paper we con- 
structed explicitly the graph over the field F 2 5. 
The structure of the graph is as follows: 



Graph A 5 


Length of the cycles 


Number of cycles 


Depth of the trees 


1 
5 


1 
1 


2 
2 


Graph B§ 


Length of the cycles 


Number of cycles 


Depth of the trees 


5 


1 


1 



Let us analyse separately graphs A 5 and B 5 . 

Graph A 5 . The rational points of Kobo(F 2 s) different from the point at infinity 
are all of the form (x, y), for some x G A§, and, for any non-zero x G A$, there are 
exactly two elements 2/1,2/2 G F 2 s such that (x, 2/1), (x, 2/2) are points of Kobo(F 2 5). 
Moreover, there is a 1 — 1 correspondence between Kobo(F 2 s) and R/(tt 2 — 1)R, 
where R — Z [u] . 
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The factorization of 7r| — 1 in primes of R is 

?r| — 1 = W 2 2 -(l + 2co). 
If we denote p± = 1 + 2u , then 

R/i^l - \)R = R/tt 2 2 R x R/ Pl R. 

Consider the points P = (0, r) G R/W 2 R x R/p 1 R, where r G i? is not divisible 
by 1 + 2u. Such points have additive order 11 in R/piR. The integer l r = 5 is 
the smallest among the positive integers k such that [7f 2 ] fe P = P or — P, namely 
the smallest among the positive integers k such that p\ \ (jr 2 + 1) or (tt 2 — 1). 
In particular, p\ | (7f 2 + 1). There are 10 points of this form, corresponding to 5 
different values of x G F 2 5. Hence such points give rise to just one cycle of length 
5. Moreover, each of these nodes is the root of a reversed binary tree of depth 2, 
since 2 is the greatest power of 7f 2 which divides 7r| — 1. Finally, consider the point 
O = (0, 0). The corresponding node is labelled by 00, belongs to a cycle of length 
one, namely a loop, and is the root of a binary tree of depth 2. 

Graph B^. The nodes belonging to the graph B^ are the x-coordinate of 
points of Kobo(F 2 io) such that x G F 2 5 and Tr 5 (x) 7^ Tr 5 (a; _1 ). We remind the 
isomorphism 

Kob (F 2W ) B5 -+ R/(n 5 2 + l)R. 

We have that 

R/i^l + \)R = R/W 2 R x R/(3 - 2u)R. 

Consider the points P = (0, r) where r 7^ in R/(3 — 2u)R. Hence, 3 — 2u does 
not divide r. The integer l r = 5 is the smallest among the positive integers k such 
that \7f2] k P = P or —P. Since there are 10 points P of this form, corresponding 
to 5 different x in F 2 s, then there is just a cycle of length 5 in graph B5. Moreover 
each of the nodes of the cycle is the root of a reversed binary tree of depth 1. 



5.2. Graph associated with $ over F 2 s. We can construct the field with 2 8 ele- 
ments as the splitting field of the primitive polynomial x 8 + x A + x 3 + x 2 + l over F 2 . 
If a is a root of this polynomial in F 2 s, then P 1 (F 2 s) = {0} U {a 1 : 1 < i < 255} U 
{00}. The graph is formed by the following three connected components. 
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The structure of the graph is summarized in the following tables. 



Graph A 8 


Length of the cycles 


Number of cycles 


Depth of the trees 


1 

4 


1 
1 


5 
5 




Graph B 8 


Length of the cycles 


Number of cycles 


Depth of the trees 


56 


1 


1 



Graph A 8 . The points belonging to Kob (F 2 $) different from the point at infinity 
are all of the form (x, y), for some x G Ag, and, for any non-zero x G Ag, there are 
exactly two elements yi,i/2 G F 2 s such that (x, y\), (x,y 2 ) are points of Kob (F 2 8). 
Moreover, there is a bijection between Kobo(F 2 8) and R/{k 2 ~ 1)-R> where R = 
Z[u]. 

After factorization in primes of R we get that 

^-8-1 -=5 o 



Hence, 



R/{tiI - 1)R = R/n 5 2 R x R/3R. 



Consider the points P of the form (0,r), being r an element of R/3R different 
from zero. The additive order of r in R/3R is 3. The integer l r = 4 is the 
smallest among the positive integers k such that \W 2 ] h P = P or —P. In particular, 
3 | (n 2 + 1). Hence, the x-coordinate of each of these points belongs to a cycle 
of length 4. Since there are 8 points of this form, corresponding to 4 different 
elements x G F 2 s, then these 8 points give rise to just one cycle of length 4. 
Moreover, being 5 the greatest power of if 2 which divides 7rf — 1, each of the nodes 
in the cycle is the root of a reversed binary tree of depth 5. 

Finally, the re-coordinate of the point (0, 0) is oo and forms a loop. This node 
is the root of a reversed binary tree of depth 5. 
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Graph B$. The graph associated with the action of the map d on the points 
belonging to B 8 can be studied relying upon the structure of the quotient ring 
i?/(7rf + 1)R which is isomorphic, after factorization in primes of 7rf + 1, to 

R/n 2 R x R/(5 - 8u)R. 

Let us define p = 5 — 8a;. The period of the x-coordinate of a point P = (0,r), 
where r ^ in R/pR, under the action of the map $ is l r , being l r the smallest 
among the positive integers k such that [Tf 2 ] k P = P or —P. The smallest such 
integer is 56. In particular p \ (W^ 6 + 1). Since there are 112 such points, then 
there is just a cycle of length 56 whose nodes represent the x-coordinate of the 
112 points. Moreover each of these nodes is the root of a reversed binary tree of 
depth one. 
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